Project

General

Profile

Actions

Bug #8065

closed

ACL Posix on Git repos

Added by Alexandre Anriot about 8 years ago. Updated almost 2 years ago.

Status:
Released
Priority:
3
Category:
System integration
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
Fix check:
Regression:

Description

Hello,

As seens with François, if the server as Posix ACL with a "default" type like that:

  1. file: var/rudder/configuration-repository/.git/objects
  2. owner: root
  3. group: rudder
  4. flags: s
    user::rwx
    group::rwx
    other::r-x
    default:user::rwx
    default:group::r-x
    default:other::r-x

Then on that case, user "ncf-api-venv", belonging to "rudder", does NOT have write rights on Git repos because of "default:group::r-x".

To prevent that case, the installation shoud delete ACL rules with the following command:

setfacl -R -k /var/rudder/

Thanks !


Subtasks 1 (0 open1 closed)

Bug #8272: ACL Posix on Git repos - fix bug in case command is missingReleasedBenoît PECCATTE2016-05-11Actions
Actions

Also available in: Atom PDF